Gullible Users Still The Weakest Security Link
from the you-can't-patch-users dept
For all the worries about software that isn't secure enough, it appears that the weakest link is still the users themselves, who are more than willing to hand over their password for a chance to win a prize. Hackers are (for good reason) using social engineering methods to gain access to various systems. It's a hell of a lot easier to get in that way while avoiding notice. While there's been a lot of focus on patching security holes, you can't patch users.
Reader Comments (rss)
(Flattened / Threaded)
one-time passwords
This is a good reason to use one-time passwords. That also protects against keyloggers, although it doesn't stop hijacking a live session.
(reply to this comment) (link to this comment)
Add Your Comment